akeb/dotenv

Maintainerscaution

One registry maintainer creates a thin publishing base, although the linked repository and recent release history provide some backing.

Release historycaution

The package has had no release in the last 12 months, despite four releases over about two years; this points to slowing maintenance rather than abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

All eight analyzed action references are unpinned, and the audit found eight high-confidence uses of floating latest container images. The workflow has read-only permissions and no untrusted checkout or script-injection findings, which limits the impact to build reproducibility and hygiene.